Extra Credit

Kerberos V5 (RFC 4120)

Official docs outline

8 sections
  1. Protocol overview

    KDC, tickets, authenticators and the three-party model.

  2. Authentication service exchange

    AS-REQ/AS-REP to obtain a ticket-granting ticket.

  3. Ticket-granting service exchange

    TGS-REQ/TGS-REP to obtain service tickets.

  4. Client/server authentication exchange

    AP-REQ/AP-REP between client and application server.

  5. Principal names and realms

    Name types for principals and realm naming.

  6. Pre-authentication

    PA-DATA and encrypted timestamp pre-authentication.

  7. Message specifications

    ASN.1 definitions for tickets and messages.

  8. Security considerations

    Replay caches, clock skew and password guessing.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 21